Remote code execution via integer overflow

Integer overflow in Microsoft Office Publisher allows remote attackers to execute code when a user interacts with malicious content. Microsoft has not disclosed the affected parsing locus, crafted input field, or operation through which arithmetic wraparound enables code execution. Exploitation requires user interaction but no prior authentication, and successful execution occurs in the affected Office user's context.